Skip to content

Commit c91797e

Browse files
Melori Arellanogchaps
andauthored
[DOCS]Clarify that by default server.host only allows local connections (#52802) (#53302)
* [DOCS]Clarify that by default server.host only allows local connections * Update docs/setup/access.asciidoc Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com> * Update docs/setup/settings.asciidoc Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com> * Update docs/setup/settings.asciidoc Co-Authored-By: gchaps <33642766+gchaps@users.noreply.github.com>
1 parent d89bd90 commit c91797e

File tree

4 files changed

+15
-16
lines changed

4 files changed

+15
-16
lines changed
93.4 KB
Loading

docs/images/kibana-status-page.png

-248 KB
Binary file not shown.

docs/setup/access.asciidoc

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,8 @@
22
== Accessing Kibana
33

44
Kibana is a web application that you access through port 5601. All you need to do is point your web browser at the
5-
machine where Kibana is running and specify the port number. For example, `localhost:5601` or
6-
`http://YOURDOMAIN.com:5601`.
5+
machine where Kibana is running and specify the port number. For example, `localhost:5601` or `http://YOURDOMAIN.com:5601`.
6+
If you want to allow remote users to connect, set the parameter `server.host` in `kibana.yml` to a non-loopback address.
77

88
When you access Kibana, the <<discover,Discover>> page loads by default with the default index pattern selected. The
99
time filter is set to the last 15 minutes and the search query is set to match-all (\*).
@@ -15,9 +15,10 @@ If you still don't see any results, it's possible that you don't *have* any docu
1515
[[status]]
1616
=== Checking Kibana Status
1717

18-
You can reach the Kibana server's status page by navigating to `localhost:5601/status`. The status page displays
18+
You can reach the Kibana server's status page by navigating to the status endpoint, for example, `localhost:5601/status`. The status page displays
1919
information about the server's resource usage and lists the installed plugins.
2020

21-
image::images/kibana-status-page.png[]
21+
[role="screenshot"]
22+
image::images/kibana-status-page-7_5_0.png[]
2223

2324
NOTE: For JSON-formatted server status details, use the API endpoint at `localhost:5601/api/status`

docs/setup/settings.asciidoc

Lines changed: 10 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -7,9 +7,7 @@ if you installed {kib} from an archive distribution (`.tar.gz` or `.zip`), by
77
default it is in `$KIBANA_HOME/config`. By default, with package distributions
88
(Debian or RPM), it is in `/etc/kibana`.
99

10-
The default settings configure Kibana to run on `localhost:5601`. To change the
11-
host or port number, or connect to Elasticsearch running on a different machine,
12-
you'll need to update your `kibana.yml` file. You can also enable SSL and set a
10+
The default host and port settings configure {kib} to run on `localhost:5601`. To change this behavior and allow remote users to connect, you'll need to update your `kibana.yml` file. You can also enable SSL and set a
1311
variety of other options. Finally, environment variables can be injected into
1412
configuration using `${MY_ENV_VAR}` syntax.
1513

@@ -34,7 +32,7 @@ with Kibana.
3432

3533
`csp.strict:`:: *Default: `false`* Blocks access to Kibana to any browser that
3634
does not enforce even rudimentary CSP rules. In practice, this will disable
37-
support for older, less safe browsers like Internet Explorer.
35+
support for older, less safe browsers like Internet Explorer.
3836
See <<csp-strict-mode, Content Security Policy>> for more information.
3937

4038
`csp.warnLegacyBrowsers:`:: *Default: `true`* Shows a warning message after
@@ -67,7 +65,7 @@ connects to this Kibana instance.
6765
`elasticsearch.requestHeadersWhitelist:`:: *Default: `[ 'authorization' ]`* List
6866
of Kibana client-side headers to send to Elasticsearch. To send *no* client-side
6967
headers, set this value to [] (an empty list).
70-
Removing the `authorization` header from being whitelisted means that you cannot
68+
Removing the `authorization` header from being whitelisted means that you cannot
7169
use <<basic-authentication, basic authentication>> in Kibana.
7270

7371
`elasticsearch.requestTimeout:`:: *Default: 30000* Time in milliseconds to wait
@@ -131,11 +129,11 @@ store saved searches, visualizations and dashboards. Kibana creates a new index
131129
if the index doesn’t already exist. If you configure a custom index, the name must
132130
be lowercase, and conform to {es} {ref}/indices-create-index.html[index name limitations].
133131
+
134-
When running multiple tenants of {kib} by changing the `kibana.index` in your `kibana.yml`,
135-
you cannot use the `kibana_user` or `kibana_dashboard_only_user` roles
136-
to grant access to {kib}.
137-
You must create custom roles that authorize the user for that specific tenant.
138-
Although multi-tenant installations are supported, the recommended approach
132+
When running multiple tenants of {kib} by changing the `kibana.index` in your `kibana.yml`,
133+
you cannot use the `kibana_user` or `kibana_dashboard_only_user` roles
134+
to grant access to {kib}.
135+
You must create custom roles that authorize the user for that specific tenant.
136+
Although multi-tenant installations are supported, the recommended approach
139137
to securing access to {kib} segments is to grant users access to specific spaces.
140138

141139
`logging.dest:`:: *Default: `stdout`* Enables you specify a file where Kibana
@@ -265,7 +263,7 @@ specifies the default route when opening Kibana. You can use this setting to
265263
modify the landing page when opening Kibana. Supported on {ece}.
266264

267265
`server.host:`:: *Default: "localhost"* This setting specifies the host of the
268-
back end server.
266+
back end server. To allow remote users to connect, set the value to the IP address or DNS name of the {kib} server.
269267

270268
`server.maxPayloadBytes:`:: *Default: 1048576* The maximum payload size in bytes
271269
for incoming server requests.
@@ -278,7 +276,7 @@ setting specifies the port to use.
278276

279277
`server.rewriteBasePath:`:: *Default: false* Deprecated setting that specifies if Kibana should
280278
rewrite requests that are prefixed with `server.basePath`, or require that they
281-
are rewritten by your reverse proxy.
279+
are rewritten by your reverse proxy.
282280

283281
`server.socketTimeout:`:: *Default: "120000"* The number of milliseconds to wait before closing an
284282
inactive socket.

0 commit comments

Comments
 (0)